Senior Enterprise Applications Engineer

Location: Toronto, ONT, Canada; Hybrid

We are seeking a skilled and detail-oriented Senior Enterprise Applications Engineer (Identity Access Management Engineer) that is responsible for designing, implementing, and managing identity and access management systems. The ideal candidate will have a strong background in cybersecurity, and ensuring procured or developed IAM systems are implemented properly and function as intended.

Day-to-Day Responsibilities:

• Develop, implement, and maintain identity and access management solutions and systems.
• Administer and maintain enterprise PKI systems, including Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs)
• Manage digital certificate lifecycle: issuance, renewal, revocation, and auditing
• Monitor PKI infrastructure for performance, availability, and security compliance
• Azure AD and Active Directory user and group management
• Microsoft Entra Connect error resolution
• Implement and enforce certificate policies, key management procedures, and security best practices
• Collaborate with IT, DevOps, and Security teams to integrate PKI with applications, devices, and services (e.g., SSL/TLS, S/MIME, VPN, Wi-Fi, code signing)
• Improve identity and access management solutions and systems for protection against evolving threats and efficiency
• Troubleshoot IAM solutions and certificate-related issues and provide support to internal teams
• Maintain documentation for PKI architecture, processes, and incident response
• Stay current with industry trends, IAM threats, vulnerabilities, and compliance requirements (e.g., NIST, FIPS, ISO 27001)

Essential Traits:

• Bachelor’s degree in computer science, Information Security, or related field
• 3+ years of experience managing PKI or cryptographic systems 
• Experience with Certificate Management software like AppviewX
• Familiarity with Okta, Sailpoint, Saviynt or other IAG solutions
• Excellent problem-solving and communication skills
• Experience with Microsoft AD CS, DigiCert, or similar PKI platforms
• Knowledge of network security protocols (SSL/TLS, IPsec, SSH)
• Excellent problem-solving and communication skills

Preferred Qualifications:

• Certifications such as CISSP, CISM, CompTIA Security+, or Microsoft Certified: Identity and Access Administrator
• Experience with cloud-based PKI solutions (e.g., AWS ACM, Azure Key Vault)
• Understanding of Zero Trust Architecture and Identity & Access Management (IAM)
• Plus to have technical experience and understanding of enterprise networking and global infrastructure environments.
• Ownership of activities needed to achieve positive outcomes; delivery based on an evaluation of priorities
• Ability to spot patterns across separate situations in order to identify key or underlying issues.  Ability to diagnose and identify the root cause in complex situations, as well as contributing factors to in order to solve a problem in a logical and systematic manner
• Ability to express oneself clearly (verbal and written) in a manner that facilitates positive results
• Flexible work hours; ability to work in alignment with business needs (location, nature of demand on the day)
• Fast-paced, hardcore work ethic
• After hours and weekend work will be necessary

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll. 

In order to be considered for a position, you must formally apply via careers.kroll.com.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.

The current salary range for this position is CAD $80,000 to $130,000.

#LI-MO1